Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/DbZqiucLKtXg_tnHgCLsTj7slY8.roa
File: DbZqiucLKtXg_tnHgCLsTj7slY8.roa (raw, json)
Hash identifier: Y3nl2lYy9DUM+ulrcRJHTjNNQpfHThzYB54J4kpUdvc=
Subject key identifier: 0D:B6:6A:8A:E7:0B:2A:D5:E0:FE:D9:C7:80:22:EC:4E:3E:EC:95:8F
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0194244526FEC09DB255C4EC91CD2B66D655
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/DbZqiucLKtXg_tnHgCLsTj7slY8.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198587
IP address blocks: 87.251.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:26:fe:c0:9d:b2:55:c4:ec:91:cd:2b:66:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0db66a8ae70b2ad5e0fed9c78022ec4e3eec958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:8f:1e:2f:91:e8:df:a9:ae:9b:ac:30:19:
98:8a:8c:e7:5d:34:75:c7:dc:f4:66:14:1b:8a:ac:
f1:6c:39:e8:59:b9:c1:f9:d8:0c:b3:ca:6f:16:59:
a2:9f:b9:72:50:1d:66:d3:7c:12:c2:84:62:cf:5a:
b1:4a:93:be:1f:3a:24:88:b4:ae:55:d2:b1:6e:67:
36:51:e6:c0:53:bf:59:ed:f8:65:96:5f:1e:53:e3:
ac:a3:8e:c8:fd:95:21:bb:25:39:1b:b3:c2:0b:73:
79:b0:47:ee:7e:d3:dd:f6:cd:d5:ab:0a:e8:31:58:
6d:de:72:61:70:75:33:2f:89:b1:f7:07:95:eb:c5:
8b:55:be:e7:cf:77:af:26:ea:0b:fe:a2:5d:6e:e0:
c9:f3:e3:7e:96:cd:8d:b0:ac:75:16:13:50:9b:63:
2e:7f:6b:74:c6:e6:dc:ad:b1:39:59:35:56:25:3b:
e7:74:79:e9:14:b2:50:09:32:0e:82:44:7d:cc:1b:
d2:aa:8d:6c:ab:93:47:61:bc:eb:c0:15:e0:8c:39:
62:1c:2c:b0:69:6e:a1:0e:e1:61:85:f5:0d:d7:57:
b4:91:dc:89:72:a5:58:17:56:80:ba:bd:14:3c:8f:
5c:9f:2e:9a:fd:00:b7:5b:aa:5c:bb:b8:39:31:23:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:6A:8A:E7:0B:2A:D5:E0:FE:D9:C7:80:22:EC:4E:3E:EC:95:8F
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/DbZqiucLKtXg_tnHgCLsTj7slY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.74.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7a:8b:d0:2a:b9:e2:dc:2f:76:66:d9:34:61:c0:08:7b:e9:
74:ea:9e:f8:c9:a3:56:89:20:0e:ba:1b:99:ab:f9:a5:48:d8:
01:de:43:e8:cc:5f:f6:b9:75:7d:a1:6d:d7:26:57:31:ed:3c:
76:6e:6f:5d:47:06:84:3b:62:75:c3:dd:e6:fa:29:c7:3d:a6:
6d:a4:37:63:a4:60:1a:8c:22:1c:cd:68:5d:24:8e:55:75:8d:
08:6f:d6:0c:10:65:74:c4:34:80:17:a6:43:52:7e:67:ac:61:
e5:e8:cb:ea:06:d6:bb:92:d2:13:fc:bd:f8:dc:94:fc:2f:49:
3c:52:dd:70:5a:d8:37:2b:60:56:84:34:e8:58:db:65:0f:c8:
18:7b:02:43:b3:82:6e:5e:03:a3:cf:85:20:0a:aa:e3:38:62:
75:2c:a3:ca:60:ad:f0:d2:30:bd:e3:e2:1a:bd:ec:b9:97:76:
74:84:be:bc:e2:f5:09:a8:f0:d2:5f:be:6e:2d:b2:ad:e6:65:
f2:2a:8c:bd:e6:df:82:5d:d1:ed:25:1d:09:19:8f:c6:94:20:
c9:46:d5:2f:43:4f:d5:e0:86:f5:8b:a8:4d:f4:da:ff:bf:e6:
6e:2b:48:8d:5a:e6:60:6b:0f:67:79:52:1c:b9:8b:3c:0e:1a:
b8:d8:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:23 2025 by rpki-client